Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
File:                     e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa (raw, json)
Hash identifier:          HPY3Kpg1mIXydU7hN9naKw1I7dq9HQej2Ty/UMcJbkw=
Subject key identifier:   58:04:96:2F:0D:1D:AD:4F:93:25:D2:87:AE:31:F8:96:2E:62:54:2A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB011DE2CEBA48D41B2DC80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        2605:4300:2600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:11:de:2c:eb:a4:8d:41:b2:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=09fea5c4-1129-48b0-aae9-02a27fbc4435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:d8:1b:02:55:26:0f:3d:4a:44:30:9e:56:
                    8a:bb:e0:d2:62:6e:0a:09:0c:60:6c:68:0e:86:6d:
                    5e:37:2d:3f:47:89:cb:ef:42:80:47:42:28:06:3a:
                    e3:70:00:cf:14:ac:7f:9e:ff:a0:06:54:0b:7a:66:
                    ad:18:df:b2:39:e8:a7:58:47:3b:df:4f:e3:69:d3:
                    fd:80:2e:73:b5:de:63:52:cb:a8:f1:db:22:09:6b:
                    66:32:52:c5:95:ee:cc:9e:34:4f:97:78:e9:b1:71:
                    34:f2:f2:d5:4b:36:08:ad:8c:93:3a:81:7c:2e:fb:
                    a5:4d:69:dc:0a:02:16:f9:6a:f7:5e:e4:2b:32:15:
                    a7:b0:a4:e6:ac:18:99:ea:e6:35:e9:e0:33:fb:17:
                    b5:22:5b:94:d7:57:f1:ed:88:42:39:4a:f8:e1:a2:
                    70:fb:10:48:2f:cb:ad:71:14:af:4f:1b:78:af:0e:
                    e3:d2:ce:fa:f0:8a:34:f9:fc:81:7b:6c:ab:5e:da:
                    f4:00:e6:12:f7:ad:58:b1:00:03:65:b8:36:37:ee:
                    34:3f:e0:51:45:c1:a7:25:ba:5c:f3:8a:26:ce:c4:
                    ed:b4:ab:d1:d6:b5:33:4d:e3:28:67:c6:9d:23:d4:
                    3c:94:9d:f1:95:3a:db:11:53:e3:c9:e4:0a:3a:47:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:96:2F:0D:1D:AD:4F:93:25:D2:87:AE:31:F8:96:2E:62:54:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:23:f7:5e:4c:05:67:0e:d3:83:84:e8:bb:0d:d6:b3:77:
         25:6b:e1:da:eb:93:3e:0f:8a:dd:2d:8b:87:13:fc:23:a5:6a:
         d4:b3:05:87:14:a8:bf:1f:c5:e5:69:84:c9:92:e9:3b:2c:7d:
         7f:3a:8e:35:0a:3d:07:2b:c8:c9:28:2f:f2:65:ba:02:60:e5:
         3d:4a:ef:dc:5d:29:41:aa:b4:30:9b:75:06:d6:17:d7:1c:cf:
         6a:e4:e2:25:fc:0a:45:01:fb:ef:ec:38:f8:43:e6:e7:6d:8f:
         97:d6:ae:10:43:6e:f0:4d:66:a4:fe:36:d3:38:f3:7c:4a:de:
         b3:24:cd:e4:f1:f8:1d:71:03:68:cd:af:55:e0:18:bc:05:d9:
         36:d3:b1:26:e9:fc:9a:1e:82:86:81:9f:91:c2:6a:bd:fd:a9:
         43:25:fc:a8:0a:19:6c:6e:7e:a2:b0:4f:ad:58:2e:26:48:88:
         47:87:e0:f1:e3:6a:8e:01:1e:98:64:cc:55:38:17:b4:44:b6:
         e6:44:8f:d2:19:a7:1d:c5:26:db:2a:a4:72:f5:29:02:2a:32:
         53:ee:f0:af:1d:58:ab:53:09:4a:20:ac:d0:96:95:4d:6d:c8:
         c6:29:80:59:a4:00:d2:a4:05:fc:52:ea:e9:c1:c9:17:d1:37:
         74:e3:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:19:11 2025 by rpki-client